Security News
Two never-before-seen Powershell backdoors have been uncovered, after researchers recently discovered an attack on Microsoft Exchange servers at an organization in Kuwait. The attack used two newly discovered backdoors: One that researchers called "TriFive," and the other, a variant of a previously discovered PowerShell-based backdoor, which they called "Snugy."
Ransomware operators are using malicious fake ads for Microsoft Teams updates to infect systems with backdoors that deployed Cobalt Strike to compromise the rest of the network. In a non-public security advisory seen by BleepingComputer, Microsoft is warning its customers about these FakeUpdates campaigns, offering recommendations that would lower the impact of the attack via its Defender ATP service.
Microsoft says that multiple Windows 10 apps including Outlook are affected by an issue causing them to forget users' passwords after the device is upgraded to certain Windows 10, version 2004 builds. "After installing Windows 10 Version 2004 Build 19041.173 and related updates you find that Outlook and other applications do not remember your password anymore," Microsoft explains.
Microsoft will soon start force upgrading Windows 10 1903 to Windows 10 1909 to keep them protected from security threats after this Windows version reaches its end of service next month. "All editions of Windows 10, version 1903 and Windows 10 Server, version 1903 will reach end of service on December 8, 2020," Microsoft explains on the Windows 10 Message Center.
Microsoft will soon start force upgrading Windows 10 1903 to Windows 10 1909 to keep them protected from security threats after this Windows version reaches its end of service next month. "All editions of Windows 10, version 1903 and Windows 10 Server, version 1903 will reach end of service on December 8, 2020," Microsoft explains on the Windows 10 Message Center.
Microsoft is working on adding a new Microsoft Forms phishing attempt review feature that will allow Office 365 admins to confirm and block forms that try to maliciously harvest sensitive data. Phishing attempts are detected by Microsoft Forms with the help of proactive phishing detection, a protection feature that will proactively identify malicious password collection in forms and surveys.
Microsoft says that it fixed a known issue affecting devices running Windows 10, version 2004 since June and causing external displays to go black when drawing in certain applications including Microsoft Office Word and Whiteboard. "If you have a device running Windows 10 version 2004 with a built-in screen and a connected external display set to Duplicate your primary screen, you might see both monitors flicker and the external monitor go black if you try to draw using an Office app," Microsoft said.
A researcher at cybersecurity services provider IOActive has identified a privilege escalation vulnerability in Windows that can be exploited by abusing games in the Microsoft Store. Ferrante discovered the vulnerability after Microsoft announced that it started allowing mods for some games in the Microsoft Store.
Microsoft is experiencing an outage that causes website content not to display correctly and for the Microsoft Store app to fail to load. When visiting www. As the Microsoft Store app pulls its data from the microsoft.com website, it also prevents the Microsoft Store app from loading.
The Microsoft Tips app has leaked more evidence that Microsoft is working on rounded corners for Windows 10 windows. For some time, Microsoft has been adding rounded corners to dialog boxes in Windows 10 apps such as Photos, Maps, Calculator, and the new Microsoft Edge.